Event ID 551

User initiated logoff 

User initiated logoff:
    User Name:  %1
    Domain:     %2
    Logon ID:   %3

Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /category:Logon/Logoff
How to enable Windows Auditing
Recommended Audit Policy

Operating Systems:
Windows Server 2000 Windows 2003 Windows XP

Audit Category:
Logon/Logoff

LEFT/RIGHT arrow keys for navigation

Back to List